Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
File: _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft (raw, json)
Hash identifier: IcDHxjffVF2krQGdIASQiP5gzO1g2aReQIg/p298HZk=
Subject key identifier: DD:A2:9C:75:9D:5E:D5:5E:25:BF:53:07:73:CD:AB:B9:02:07:FF:B0
Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
Certificate issuer: /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Certificate serial: 019EBEB5EDECEC4273C93323A001B821D482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
Manifest number: 0F33
Signing time: Sat 13 Jun 2026 02:00:54 +0000
Manifest this update: Sat 13 Jun 2026 02:00:54 +0000
Manifest next update: Sun 14 Jun 2026 02:00:54 +0000
Files and hashes: 1: 1j-0fRD2UKFFOwRpmh3BdgzS-KY.roa (hash: J/OpGEjDOcAf1NYGQDPN+Up9rV3l4EiqrJmyP7OZ814=)
2: 1jeMDJUiXFwN8iyBiVBPKoxXVXs.roa (hash: AMsBQ6qY2ffhJac7OKTZiKgzqFTd8W61KP5VxcegYfI=)
3: 8dzN450MceNxFZuh40v7FDAkGTQ.roa (hash: BgZesWB7TBZ2ukStYIi5/XRVw/OSfrLbRqY0NDLypP4=)
4: 8qcIukp4HnQx0oYkGLwCzsKZiYo.roa (hash: lKiK6GaUIl/2a4hMyDoRDNhH9WPIQAXZ8Vf6bDffpMU=)
5: QHyWqsk-H_U_C8FgB92VgJrEDYc.roa (hash: 2PrV5bBw8H3ip6Yld1QjjzmInJzdg74Uy0jZkkwlPFU=)
6: SebffTJZqAhjn9b2tB5fFNf4TVo.roa (hash: gyrU041nZbWUtGgHmkEeVRe5OSCwzL356v2625rtYDU=)
7: _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl (hash: ZHQYYyew0B2K7ExieXzkrWVm7jNmENxt6kbEpZ/ntwk=)
8: yvdM8oqK9UEjHe-j9vf4hYEvsHI.roa (hash: FyIoG3Rlf0BHBBnW/KlrAfAwmMpmY2nq+UoGuSzOyGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b5:ed:ec:ec:42:73:c9:33:23:a0:01:b8:21:d4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Validity
Not Before: Jun 13 02:00:54 2026 GMT
Not After : Jun 14 02:00:54 2026 GMT
Subject: CN=dda29c759d5ed55e25bf530773cdabb90207ffb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:82:cd:df:34:cb:db:d8:b9:56:ce:97:ac:0e:
61:73:41:75:b8:33:dc:fa:50:5d:50:e8:45:58:03:
b6:c1:c0:2c:d2:d5:b1:0d:6f:d7:e6:54:c9:da:64:
18:9d:dd:3a:eb:67:22:9f:d6:33:c0:00:0a:08:b0:
07:8e:18:51:d9:31:6e:b3:dd:f0:f1:ea:2e:6e:f4:
86:06:2c:80:94:26:20:99:0b:06:79:8b:9b:06:54:
c1:55:37:6e:0f:68:48:1a:5b:d2:b6:ac:1d:b1:70:
5e:25:bc:71:b8:f2:e6:7c:5a:df:33:9e:7c:fe:39:
11:cd:8c:40:22:43:76:b5:0d:03:73:fc:6e:42:b5:
1d:fa:6a:36:86:55:10:99:b7:f7:72:48:bf:a0:ff:
59:e7:57:ea:65:90:94:90:5c:31:b4:ed:25:f4:7e:
67:b3:d6:f3:d1:f7:33:22:e2:32:7f:8a:77:60:07:
4d:6e:aa:a9:90:e8:9c:42:26:03:72:90:1a:d6:89:
0c:81:96:4b:81:61:db:0c:e3:b8:28:5e:47:fe:36:
20:59:b0:b6:4f:f6:ba:f2:61:04:89:18:19:1e:99:
be:44:35:de:7e:15:96:11:a9:c0:e5:a4:2b:44:b5:
6a:49:7e:a0:4c:fe:71:0d:de:d2:3c:c6:b3:87:62:
37:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A2:9C:75:9D:5E:D5:5E:25:BF:53:07:73:CD:AB:B9:02:07:FF:B0
X509v3 Authority Key Identifier:
keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:24:c8:48:15:76:5b:df:07:2c:42:d0:bf:07:5e:9b:72:44:
38:e5:b6:41:c1:ef:ec:9f:43:49:22:bb:d4:2e:10:76:33:4f:
3a:26:fa:0d:de:d7:f4:b0:07:82:33:75:b7:68:c3:24:84:31:
fd:6d:ec:e1:c2:e4:ac:c9:b8:b2:e9:e7:cd:cd:4b:46:3d:14:
b1:15:13:57:b4:cc:78:75:cd:31:0c:1d:9c:02:4f:e6:b3:1d:
10:bd:e6:0d:b7:3e:83:ed:52:ae:13:94:df:4c:ba:87:ed:86:
ac:b1:91:88:e2:76:43:dd:db:b9:d9:3e:1b:f8:cb:21:3d:4c:
a9:b3:6c:b0:d9:da:01:55:46:d8:f4:0c:24:e0:d9:fd:84:34:
06:2e:c4:0d:1e:f5:9e:58:f4:a4:84:ec:5f:e9:3d:d5:d8:63:
a5:47:e4:a3:4a:d5:44:3b:ed:60:d9:51:de:d9:96:12:10:be:
a2:2c:fc:0c:e2:bc:48:a6:f7:f2:35:8c:7c:59:63:5e:f4:a3:
38:5e:09:23:82:5b:10:4c:20:71:e3:0d:21:76:b8:53:c5:a2:
57:57:0f:af:72:89:74:82:dc:ac:91:33:bb:19:4c:a5:9a:8d:
d3:6a:a5:71:b6:11:b1:51:4f:c1:e3:be:49:ac:9c:ee:10:4d:
09:b5:fa:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:58:38 2026 by rpki-client